Your Data, Your Control
How Lovelace handles the accounts you connect to her. In short: only you can see and change your data — Lovelace acts solely as your assistant, within the limits you set.
We cannot view your data
Kizuna, the Lovelace team, and app administrators have no ability to view, read, copy, export, or modify the contents of your Google Calendar, Gmail, or Drive. Your connected data is never displayed in any admin dashboard, never stored in our database, and never included in any export or report.
Your connection belongs to you alone
When you connect a service, the authorization is issued by Google directly to your account and is scoped to you. Access tokens are held encrypted by the platform and are only ever used to serve a request that you personally initiated in your own session. No other user, and no operator of this app, can act through your connection.
You decide what Lovelace may do
For each connected service you individually control whether Lovelace may view, create, modify, or delete. These switches are enforced on our servers, not just in the interface — if you switch a capability off, the request is refused before it ever reaches Google. Deletion is switched off by default.
Access is momentary and purposeful
Lovelace only reaches into a connected service when you ask her to, for the specific task you asked for. Nothing is synced, indexed, mined, crawled in the background, or used to train any model. Retrieved content lives only in your conversation so she can answer you.
You can revoke at any moment
Disconnect any service — or all of them at once — from the Connected Accounts page. Revocation is immediate and server-side: the authorization is destroyed, not merely hidden. You can additionally revoke access from your Google Account security settings at any time.
Actions that leave your account
Before Lovelace sends an email, deletes or moves a calendar event, or trashes a message, she shows you exactly what she intends to do and waits for your confirmation. Viewing and summarizing happen directly, because they change nothing.